If this is your first visit, be sure to
check out the FAQ by clicking the
link above. You may have to register
before you can post: click the register link above to proceed. To start viewing messages,
select the forum that you want to visit from the selection below.

FreeBSD 12.0-RC2

Is there any news about DirectAdmin on FreeBSD 12.RC-2 and OpenSSL 1.1.1-beta?

I've upgraded one of my test bsd box from 11.2-RELEASE to 12.0-RC2 and directadmin was unable to start because directadmin binary compiled with openssl1.0

Then, I install /usr/ports/security/openssl and DirectAdmin starts & works fine, but that's not an option, 12.0-RC2 base all built over openssl 1.1 without SSLv2|v3 support
and with TLSv1.3 support.

So, I built all my sources/ports (php nginx apache exim dovecot) over base openssl, not one from ports, so all of it completely support TLSv1.3, the one exclusion is DirectAdmin itself.
Also, linking /usr/local/lib/libssl.so.8 to /usr/lib/libssl.so.111 and /usr/local/lib/libcrypto.so.8 to /lib/libcrypto.so.111 won't help -- directadmin unable to start with error

Undefined symbol "SSL_load_error_strings"

Of course i'ts undefined, no method "SSL_load_error_strings" in /usr/lib/libssl.so.111

TLSv1.3 is not a future, it's here already, so I hope to see DirectAdmin OpenSSL/1.1 powered soon

As a general policy, we don't start development until the full version is released.
In some cases the binaries will work, where workarounds could be used, but if not, then it's a waiting game for the full version to come out.
We're also excited for all of the new goodies TLS 1.3 provides and will start development on FreeBSD 12 once it's released.
Reading the rumblings of the internets, it seems like it could possibly be released mid December, so not too far off.. so if that happens, then possibly a beta version of DA for it maybe early to mid January, assuming all goes well (very rough, not in stone)

## Ensure all binaries located in /usr/local/directadmin/ use
## same libs from /usr/local/directadmin/lib
[/usr/local/directadmin/]
libssl.so.8 /usr/local/directadmin/lib/libssl.so.9
libcrypto.so.8 /usr/local/directadmin/lib/libcrypto.so.9

Then

Code:

#service directadmin restart

Now DirectAdmin is back and serving TLS 1.2 via old openssl 1.0 libs.

Just a true unix magick

PS: I do not use custombuild, all my systems are crafted/customized manually -- most part of software built from ports and all php releases built from source with freebsd patches includion my own optimizations and CPU-optimized flags.